Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35312e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e35312e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          EbYtq23JnCxdK2x9WQN7bm/gIGwvzZ/R8osp2GFhkJw=
Subject key identifier:   12:9A:09:E7:58:EF:4A:61:20:1E:9F:86:65:A6:34:E1:01:62:EA:E3
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       37C0645B20555DBB37E1B16DD29CD68DE451E878
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35312e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 05 Mar 2024 17:49:12 +0000
ROA not before:           Tue 05 Mar 2024 17:44:12 +0000
ROA not after:            Tue 04 Mar 2025 17:49:12 +0000
asID:                     17147
IP address blocks:        163.247.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c0:64:5b:20:55:5d:bb:37:e1:b1:6d:d2:9c:d6:8d:e4:51:e8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 17:44:12 2024 GMT
            Not After : Mar  4 17:49:12 2025 GMT
        Subject: CN=129A09E758EF4A61201E9F8665A634E10162EAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:d0:5a:42:34:08:18:80:68:65:26:20:1e:
                    6d:ed:6a:68:fd:c4:c7:70:59:a1:5d:22:4a:ed:6d:
                    26:96:da:b1:08:93:33:b9:a7:63:03:c4:b0:0e:c1:
                    c5:da:17:37:a7:71:90:2d:70:4e:5f:b1:86:cd:dd:
                    3b:03:3b:ff:8a:1a:6c:e5:d5:51:07:91:b6:8c:21:
                    24:ec:c5:d5:c1:8f:17:94:c0:ad:72:24:73:5d:b4:
                    7b:a9:99:f0:5d:6d:50:57:0a:c6:b0:69:e3:51:0a:
                    3b:de:96:88:67:7c:47:3c:d8:97:c8:9e:41:73:e6:
                    f6:ff:fd:f0:fb:e2:e3:63:17:81:01:ca:65:b9:72:
                    db:99:cb:91:ff:93:df:b1:27:92:4f:7a:66:ad:d6:
                    5c:44:fb:d2:10:d5:fd:ce:29:71:8b:b9:f3:61:a1:
                    ca:8f:1a:77:8d:8b:75:c6:65:4e:1b:f6:1d:bd:fe:
                    f5:41:d4:b4:1b:b5:db:8b:ab:32:73:c6:fc:4a:d0:
                    de:e1:c2:d8:c8:e8:49:a3:62:d9:f7:04:fa:0e:f2:
                    dc:9e:d8:c8:f8:34:f3:66:2a:63:02:21:de:9c:c2:
                    87:56:06:f5:12:fa:18:16:7b:36:c2:bf:36:c9:9d:
                    18:1b:ac:64:d0:c1:25:26:f1:47:79:80:da:d5:20:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9A:09:E7:58:EF:4A:61:20:1E:9F:86:65:A6:34:E1:01:62:EA:E3
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35312e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:61:37:78:3d:0b:7b:80:32:50:39:c6:90:d5:4a:6c:35:19:
         4c:46:d6:2f:dd:b2:13:cc:8e:31:ae:3e:03:0b:d6:21:67:b3:
         61:40:64:92:62:2a:97:74:e2:c9:a7:6c:15:f1:71:2b:61:cd:
         d5:27:09:23:f1:62:d2:5a:b4:a4:c8:c6:96:b3:06:10:2d:1c:
         28:78:f3:87:e6:8c:82:a3:89:b4:79:e4:90:d4:74:9d:2f:04:
         4e:6e:f3:d3:ab:7e:71:c2:e6:ee:54:3f:d2:1a:15:b1:c6:81:
         fe:85:86:3d:95:c0:20:51:b5:b6:30:16:c4:1a:13:98:03:6b:
         63:67:b1:48:66:ed:4d:71:8e:81:24:f7:72:b0:c3:07:92:b4:
         d0:2c:0f:1d:dc:dc:dd:14:dd:d8:a9:cb:87:19:18:63:7d:9b:
         a6:b9:7f:37:ad:08:ce:3c:57:94:a5:bf:b1:86:cd:e6:87:b3:
         b7:e8:5e:5b:b8:d1:96:93:6e:55:4a:0d:ba:1d:bc:c1:d3:6d:
         b8:a5:93:da:0d:8a:29:65:4e:23:be:0a:d1:a3:58:3a:d4:28:
         1a:d8:40:bb:af:dd:8c:75:45:91:e1:36:92:8d:63:02:f7:02:
         a7:74:e1:38:7f:9e:89:bf:96:e3:cf:f8:8d:7d:6e:85:46:bb:
         30:e5:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:21 2024 by rpki-client on console-ams.rpki-client.org